NetSight
IP …
medium4.3

CVE-2008-2939

Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp modu…

Impact

Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.

Affected products

VendorProductAffected versions
ApacheHttp Server
through 2.0.63
from 2.2.0 through 2.2.9
AppleMac Os X
through 10.5.6
CanonicalUbuntu Linux
Versions 6.06, 7.10, 8.04
OpensuseOpensuse
Versions 10.2, 10.3, 11.0

Weakness classification

CWE-79

References